Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
File: 3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json)
Hash identifier: CNEPHIPGVOapHCVEIlWRALdcmvuHnI7NkuFtsy1mgJw=
Subject key identifier: 48:E0:8F:51:50:40:9B:A3:7F:6E:D4:A1:5B:4F:75:35:F5:C9:2A:72
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 018F23B849B11CC07D031EBF93DFD9492C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
Manifest number: 0A9F
Signing time: Sun 28 Apr 2024 08:00:31 +0000
Manifest this update: Sun 28 Apr 2024 08:00:31 +0000
Manifest next update: Mon 29 Apr 2024 08:00:31 +0000
Files and hashes: 1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: Tnh9iWuYYeMj/2UQbRVV6SjZb8UUInJY1d/cB8M4CD8=)
2: HYWZIyGDoqun4E7bPExTZPZqqWs.roa (hash: rNEMAU4LuGZ/eKnqTr896Ivt6keCIUWhfasO37uqnUY=)
3: lOpLMmDWkVm6Uv-65iHg-tlLKnw.roa (hash: Atkq/x7/z0gk3dXhG2rqN3yDNhKOFbO7AuVZf8ADmuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 01:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:23:b8:49:b1:1c:c0:7d:03:1e:bf:93:df:d9:49:2c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Apr 28 08:00:31 2024 GMT
Not After : Apr 29 08:00:31 2024 GMT
Subject: CN=48e08f5150409ba37f6ed4a15b4f7535f5c92a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:02:23:60:a6:c4:03:a9:22:d1:87:60:da:
5b:14:2c:f4:b3:3f:e3:2e:a0:71:14:b2:47:3d:9e:
f3:22:de:95:4e:2e:26:88:57:76:b9:1f:15:ae:c5:
99:44:2a:07:fc:64:11:19:1e:b2:89:9b:f7:60:97:
61:95:85:0b:1d:ea:b0:c8:36:80:0a:97:fb:56:f3:
b3:32:f3:bb:82:33:6b:dc:3e:ba:b1:2d:a6:4c:cf:
2d:99:9e:8d:44:28:31:46:85:ab:ed:f5:3e:b8:00:
75:46:a8:65:23:4e:d9:4d:88:9e:be:d4:57:fc:01:
5e:2c:7d:36:0e:87:89:a5:76:96:30:50:05:d9:a6:
a5:4f:87:93:a6:39:9d:29:66:10:b0:0e:cc:df:ca:
f4:e3:41:79:48:19:03:c8:f6:00:fa:10:e7:fb:f4:
93:5b:f5:16:e5:d9:c0:e5:33:f5:c0:07:5d:6b:c6:
7d:ed:5c:d0:0b:69:e2:68:e2:bf:fa:70:08:c1:56:
fb:1b:a6:47:4e:b9:0a:b5:08:6b:98:6f:ca:05:e4:
7a:7c:7a:ce:27:38:9e:34:a3:cf:99:28:0a:15:fc:
b8:33:17:0b:d0:b6:9a:99:b7:e6:48:24:49:76:4d:
97:30:eb:39:27:23:56:f3:b6:67:2c:ea:01:ec:ae:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E0:8F:51:50:40:9B:A3:7F:6E:D4:A1:5B:4F:75:35:F5:C9:2A:72
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:af:e0:7a:3e:2a:af:b0:8a:b9:78:0e:30:c9:5d:4d:f4:33:
49:bb:12:39:3a:60:a5:04:07:17:43:a0:f7:f6:f1:6e:ca:8b:
f1:7d:84:75:c5:60:59:03:6d:47:86:2b:0e:c0:13:7e:16:3f:
6f:b1:1a:68:1c:2b:c0:cf:26:24:21:5f:44:ec:10:eb:a2:79:
99:b0:e6:b2:50:03:fa:75:96:fb:b8:f0:fa:54:73:06:86:bc:
ca:88:1b:e0:a8:45:91:08:46:d5:c2:b5:d8:bc:ef:de:f5:4e:
64:ba:cd:f6:ae:60:4c:73:04:33:2b:64:a9:23:09:ee:9d:8d:
7d:7d:f1:eb:9b:58:25:0f:e5:e0:ff:d6:fd:4b:7a:18:25:97:
0e:47:6a:f1:14:2f:76:b4:7e:99:03:6d:8b:b3:2e:49:d6:1a:
bc:32:93:89:72:ef:f9:27:76:32:73:76:2e:d9:ed:e8:c0:b9:
ea:54:ab:0a:93:f5:3c:6b:39:ea:45:07:ba:e9:37:c0:f9:66:
1c:2a:b2:82:fe:91:f2:d6:b1:04:7e:50:dd:df:ff:1f:c8:af:
a0:f2:eb:1d:40:ed:8a:28:f8:fd:6d:f6:40:d9:5f:44:f7:3f:
34:ab:bc:67:35:20:26:c1:9a:09:4b:1e:ac:58:ac:71:55:9a:
e1:98:d6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 09:04:58 2024 by rpki-client on console-ams.rpki-client.org